JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.26.231.163

216.26.231.163 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 22%: ?

22%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.26.231.163

Whois 216.26.231.163

IP Abuse Reports for 216.26.231.163:

This IP address has been reported a total of 27 times from 15 distinct sources. 216.26.231.163 was first reported on September 26th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇮 administrator	2026-06-02 22:13:26 (3 days ago)	2026-06-02 00:04:58,724 fail2ban.actions [1162]: NOTICE [ninjafirewall] Ban 216.26.231.163 2 ... show more 2026-06-02 00:04:58,724 fail2ban.actions [1162]: NOTICE [ninjafirewall] Ban 216.26.231.163 2026-06-02 00:04:58,724 fail2ban.actions [1162]: NOTICE [ninjafirewall] Ban 216.26.231.163 ... show less	Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack
🇬🇧 PeravixGroup	2026-05-23 01:21:06 (2 weeks ago)	Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: ME ... show more Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-05-22 13:22:11 (2 weeks ago)	Honeypot detection: Privilege escalation / elevation attempt on port 8080. Severity: CRITICAL. Aaran ... show more Honeypot detection: Privilege escalation / elevation attempt on port 8080. Severity: CRITICAL. Aaran.cloud show less	Hacking
🇺🇸 LSPCCU	2026-05-10 21:16:44 (3 weeks ago)	TSEC Honeypot Network report. Threat score: 91/100. Categories: DDoS Attack, Port Scan, Hacking, Bru ... show more TSEC Honeypot Network report. Threat score: 91/100. Categories: DDoS Attack, Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: ssh-telnet, cowrie. Context: 216. show less	DDoS Attack Port Scan Hacking Brute-Force Web App Attack SSH
🇨🇳 ThreatBook.io	2026-05-07 23:32:35 (4 weeks ago)	ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/216.26.231.163 2026-0 ... show more ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/216.26.231.163 2026-05-07 05:22:27 /special/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
🇸🇮 administrator	2026-05-04 17:21:33 (1 month ago)	2026-05-04 18:20:41,390 fail2ban.actions [264717]: NOTICE [ninjafirewall] Ban 216.26.231.163 ... show more 2026-05-04 18:20:41,390 fail2ban.actions [264717]: NOTICE [ninjafirewall] Ban 216.26.231.163 2026-05-04 18:20:41,390 fail2ban.actions [264717]: NOTICE [ninjafirewall] Ban 216.26.231.163 2026-05-04 18:20:41,390 fail2ban.actions [264717]: NOTICE [ninjafirewall] Ban 216.26.231.163 ... show less	Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
Anonymous	2026-03-24 05:57:27 (2 months ago)	216.26.231.163 - - [24/Mar/2026:06:57:26 +0100] "GET /product/profuel-vitamin-b-komplex-forte-180-ta ... show more 216.26.231.163 - - [24/Mar/2026:06:57:26 +0100] "GET /product/profuel-vitamin-b-komplex-forte-180-tabletten/ HTTP/1.1" 200 63307 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 YaBrowser/22.7.0 Yowser/2.5 Safari/537.36" show less	Bad Web Bot
🇺🇸 cyfordtechnologies.com	2026-03-21 09:58:36 (2 months ago)	High-abuse ASN prefix: 216.26. : Reported by Cyford API	Web App Attack
🇩🇪 LRob.fr	2026-03-12 06:45:18 (2 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2026-02-12 23:37:45 (3 months ago)	ThreatBook Intelligence: Spam more details on http://threatbook.io/ip/216.26.231.163 2026-02-12 03:2 ... show more ThreatBook Intelligence: Spam more details on http://threatbook.io/ip/216.26.231.163 2026-02-12 03:20:08 /phpinfo.php show less	Web App Attack
🇨🇳 ThreatBook.io	2026-01-19 00:28:36 (4 months ago)	ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/216.26.231.163 20 ... show more ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/216.26.231.163 2026-01-18 04:49:57 /photo/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:02:11 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇨🇳 ThreatBook.io	2025-11-25 23:36:00 (6 months ago)	ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/216.26.231.163 20 ... show more ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/216.26.231.163 2025-11-25 17:20:48 /druid/index.html show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:52:14 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 216.26.231.163 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 216.26.231.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:51:58.795774 2025] [security2:error] [pid 3314677:tid 3314677] [client 216.26.231.163:47783] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.district14.info"] [uri "/.git/HEAD"] [unique_id "aSPkbsSU68uwnnx-geuXegAAABw"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 72.234.16.75

🇺🇸 23.27.210.112

🇻🇳 163.223.13.54

🇺🇸 72.214.49.194

🇮🇶 65.20.134.97

🇩🇪 43.165.6.182

🇸🇬 43.134.42.6

🇩🇪 213.209.159.56

🇷🇺 176.109.97.11

🇨🇳 111.30.42.43

🇬🇧 81.19.219.232

🇺🇸 34.227.109.182

🇲🇽 186.96.145.241

🇺🇸 150.107.38.251

🇸🇬 101.32.248.94

🇨🇳 39.187.123.181

🇺🇸 35.245.79.104

🇫🇷 161.97.72.101

🇨🇳 117.80.249.49

🇳🇱 89.21.67.134